Ralliant Corp 10-K Cybersecurity GRC - 2026-02-26

Page last updated on February 26, 2026

Ralliant Corp reported their cybersecurity risk management and governance process in a yearly 10-K filed on 2026-02-26 16:21:21 EST.

Filings

10-K filed on 2026-02-26

Ralliant Corp filed a 10-K at 2026-02-26 16:21:21 EST
Accession Number: 0002041385-26-000023

Note: filing items unformatted. Drop us a note with the above URL to help us prioritize formatting it!

Item 1C. Cybersecurity.

ITEM 1C. CYBERSECURITY Cybersecurity Risk Management and Strategy The Company's cybersecurity risk management and strategy focus on a threat-informed defense. Cybersecurity risks are identified, assessed, and managed directly through the cybersecurity function's risk management program, and are also integrated into, and are among the risks evaluated and considered by, the Company's enterprise risk management ("ERM") program. The Company's cybersecurity program is informed by cybersecurity and privacy frameworks, including the National Institute of Standards and Technology Cybersecurity Framework, and accepted industry practices. A centralized cybersecurity function works with privacy, governance, and legal personnel to align policies and standards designed to identify, assess, prevent, detect, mitigate, and remediate cybersecurity risks with regulatory, contractual, and disclosure requirements and to provide product security guidance for operating companies and technical teams. To protect its systems and data, the Company uses a range of security controls, including access management, network and endpoint protection, security monitoring, vulnerability management and penetration testing, and incident response and business continuity plans. The Company conducts periodic tabletop exercises with technical teams and management to assess the effectiveness of key controls. Internal audit and independent third parties, including assessors, consultants, and auditors, periodically assess elements of the cybersecurity program and related controls. Cybersecurity risks associated with the Company's third-party vendors, including cloud service providers and other suppliers with access to Company systems or data or that support critical operations, are managed through risk-based due diligence and appropriate contractual requirements. Employees receive training at least annually on cybersecurity, and the Company conducts monthly phishing simulations and related awareness activities. As part of its ongoing cybersecurity risk management and ERM programs, the Company regularly evaluates whether cybersecurity threats or incidents present, or are reasonably likely to present, a material risk to its business strategy, results of operations, or financial condition. To date, the Company believes that such risks, including from prior incidents, have not materially affected, and are not reasonably likely to materially affect, the Company's business strategy, results of operations, or financial condition. For additional information, including how cybersecurity risks may impact the Company in the future, see "Item 1A. Risk Factors" in this Annual Report. Notwithstanding these measures, the Company expects that cyber threats will continue to evolve, and no cybersecurity program can fully eliminate residual risk. Cybersecurity Governance Management's cybersecurity risk management and strategy processes are led by the Chief Technology and Growth Officer ("CTO") and the Chief Information Security Officer ("CISO") , who are experienced executives with backgrounds in digital and cloud technologies, cybersecurity, incident response, risk management, and resilience, and with advanced degrees and relevant education. The CTO and CISO jointly oversee the Company's cybersecurity program, including implementation of controls, incident response processes, engagement of third-party experts, and coordination with operating company leaders. The cybersecurity function uses monthly cybersecurity metrics and key indicators, such as vulnerability remediation timelines, to regularly inform leadership, including the CTO and CISO, at the corporate and operating company levels. Potentially significant cybersecurity incidents are monitored and escalated by members of the Company's cybersecurity function, as appropriate, to an incident management team to assess business impact and materiality and to determine any required disclosure or other regulatory or contractual notifications, including under securities and data protection laws. Oversight responsibility for cybersecurity risk is shared by the Board and the Audit Committee . The Board has delegated to the Audit Committee primary responsibility of exercising oversight with respect to the Company's cybersecurity risk management. The CTO and CISO report to the Audit Committee quarterly on cybersecurity matters, including threat landscape developments, metrics used to monitor the effectiveness of the Company's cybersecurity program, and third-party reviews and assessments. The Audit Committee reports to the full Board on matters discussed during its meetings. The Company also has protocols by which certain cybersecurity incidents are escalated and, where appropriate, reported to the Audit Committee in a timely manner. 42

Company Information